Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File:                     kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier:          kbA8if28CFLQoiBx8dvc7G704pSdB8vXGreSg87t8EI=
Subject key identifier:   A7:84:9B:50:D7:3B:9A:C8:46:0F:B1:CE:12:B3:E4:28:3C:9F:1D:4D
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer:       /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial:       01904C454CD47F8B6A8FD785FDFC2D2AC9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number:          0ED8
Signing time:             Mon 24 Jun 2024 22:02:08 +0000
Manifest this update:     Mon 24 Jun 2024 22:02:08 +0000
Manifest next update:     Tue 25 Jun 2024 22:02:08 +0000
Files and hashes:         1: gdTGgL5HfNwRju2ijxYPWfRjtj4.roa (hash: RJTyD3dYmZuxCDXxWQzfe/a6qUC2e97rWqcheVagxzM=)
                          2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: s8x5KEboAiKkJBsqxCoTP2Gn7HAiryVyyKr0O1aBJHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 22:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4c:45:4c:d4:7f:8b:6a:8f:d7:85:fd:fc:2d:2a:c9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
        Validity
            Not Before: Jun 24 22:02:08 2024 GMT
            Not After : Jun 25 22:02:08 2024 GMT
        Subject: CN=a7849b50d73b9ac8460fb1ce12b3e4283c9f1d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:d1:0b:09:ad:13:dd:98:26:1f:b1:98:ea:
                    d1:60:5c:18:49:70:c8:ab:b3:9a:64:76:14:62:3c:
                    00:79:6b:89:6c:90:d6:b7:30:c7:df:ab:73:31:8c:
                    38:7b:af:85:1d:a0:92:5a:d6:09:be:c0:66:ec:53:
                    33:bf:08:2f:99:35:6a:80:11:e2:b9:3d:da:72:31:
                    09:90:e9:f3:38:10:1a:bb:b9:95:6d:6e:67:ec:c4:
                    2e:cb:e6:24:d6:b8:f4:d3:89:70:52:a5:9b:b6:d7:
                    53:61:14:80:1b:fc:d2:2f:d7:7e:89:7d:f9:f6:be:
                    25:c5:d2:14:44:84:7f:9d:2f:e2:2b:7a:33:c9:26:
                    bc:16:f2:06:5b:77:7d:57:5f:da:06:ff:b4:14:66:
                    f1:52:3a:8b:d3:cf:e2:35:57:60:36:93:89:bb:cc:
                    f6:f8:20:81:01:56:48:c0:ad:95:05:8f:0e:b2:2c:
                    3f:05:f0:65:c1:2c:ff:08:1d:0a:66:09:e5:97:76:
                    35:93:93:f3:78:81:78:86:a7:bd:ba:51:8b:74:d4:
                    f1:36:a4:0c:7c:ea:2b:87:53:25:b0:b3:8d:08:6f:
                    bb:1b:93:b2:38:23:2e:ec:a7:c9:9a:c2:ae:b3:1c:
                    f1:7b:56:a4:64:fa:fe:84:4d:49:2f:72:72:d2:04:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:84:9B:50:D7:3B:9A:C8:46:0F:B1:CE:12:B3:E4:28:3C:9F:1D:4D
            X509v3 Authority Key Identifier:
                keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:80:48:62:1f:c2:31:79:29:7a:94:a9:82:6a:d1:a1:81:
         01:3e:ed:0d:1f:fd:46:e6:6c:b1:c5:29:c5:69:70:ee:03:cd:
         08:8d:f8:ee:93:d3:b6:1c:8c:9d:cd:b2:1a:01:a5:18:fa:fc:
         0a:27:ee:95:0c:f6:5b:19:e7:0b:00:6f:d3:94:d4:95:03:f8:
         47:7a:68:34:7a:26:b4:bd:9f:98:ed:20:bc:38:7c:e2:5b:76:
         f6:d6:4c:f7:ad:55:83:b3:df:12:3d:06:b3:b4:68:6b:a0:72:
         c8:87:c4:3f:2b:03:20:7a:cd:19:7f:40:91:9d:6b:54:6a:e7:
         4b:e0:41:79:d1:c8:e4:df:ca:0f:3a:46:05:72:64:b5:e1:db:
         da:31:b1:77:f6:08:aa:08:86:19:aa:cc:a4:52:52:fc:ac:35:
         00:98:04:2b:ab:71:a5:8c:1f:ff:05:27:58:d0:2c:ef:2f:92:
         1d:a5:34:5d:bc:f5:5f:6f:47:b9:34:f8:f6:6e:3a:21:9d:fe:
         99:9e:49:40:e7:e6:e7:ec:61:5a:96:8b:63:08:9d:74:98:c3:
         0d:21:03:23:74:17:70:78:c8:60:df:4b:58:fd:b1:4e:ea:5f:
         ba:b2:3d:dc:b2:98:87:28:5f:62:1b:37:cc:ec:cc:72:f0:a7:
         47:a8:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:05:34 2024 by rpki-client on console-ams.rpki-client.org